[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fV4vO-WrmVipnPKS9mskLu7uFCb_0OvED_8bqmnW_8ok":3,"g5a-ex:redlion\u002Fcrimson@*":109,"g5a-family:redlion\u002Fcrimson":111},{"success":4,"data":5},true,{"product":6,"versions":31,"topVulnerabilitiesByEpss":38,"kevVulnerabilities":87,"seoMetadata":88,"meta":107},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":30},"redlion","crimson",6,9,0,"2023-11-06",[14,17,19,21,24,27],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"2.1",{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},"3.0",1,{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},"3.1",4,{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},"3.2",2,"Crimson by Redlion is a technology product with 6 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[32,33,34,35,36,37],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":23,"kev_count":11,"has_kev":16},{"version":25,"cve_count":26,"kev_count":11,"has_kev":16},{"version":28,"cve_count":29,"kev_count":11,"has_kev":16},[39,47,54,59,62,67,73,77,82],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":46},"CVE-2020-27279","A NULL pointer deference vulnerability has been identified in the protocol converter. An attacker could send a specially crafted packet that could reboot the device running Crimson 3.1 (Build versions prior to 3119.001).","2021-01-06",7.5,"v3.1","High",0.0175,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":44,"severity":52,"isKev":16,"epssScore":53},"CVE-2019-10990","Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.","2019-09-23",6.5,"Medium",0.01341,{"cveId":55,"description":56,"publishedDate":50,"cvssScore":57,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":58},"CVE-2019-10984","Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers.",7.8,0.0101,{"cveId":60,"description":61,"publishedDate":50,"cvssScore":57,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":58},"CVE-2019-10996","Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed.",{"cveId":63,"description":64,"publishedDate":42,"cvssScore":65,"cvssVersion":44,"severity":52,"isKev":16,"epssScore":66},"CVE-2020-27283","An attacker could send a specially crafted message to Crimson 3.1 (Build versions prior to 3119.001) that could leak arbitrary memory locations.",5.3,0.00956,{"cveId":68,"description":69,"publishedDate":42,"cvssScore":70,"cvssVersion":44,"severity":71,"isKev":16,"epssScore":72},"CVE-2020-27285","The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read and modify the database without authentication.",9.1,"Critical",0.009,{"cveId":74,"description":75,"publishedDate":50,"cvssScore":57,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":76},"CVE-2019-10978","Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area.",0.00868,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":65,"cvssVersion":44,"severity":52,"isKev":16,"epssScore":81},"CVE-2022-3090","Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.","2022-11-17",0.00649,{"cveId":83,"description":84,"publishedDate":12,"cvssScore":85,"cvssVersion":44,"severity":71,"isKev":16,"epssScore":86},"CVE-2023-5719","\nThe Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent (%) character, invalid values will be included, potentially truncating the string if a NUL is encountered. If the simplified password is not detected by the administrator, the device might be left in a vulnerable state as a result of more-easily compromised credentials. Note that passwords entered via the Crimson system web server do not suffer from this vulnerability.\n\n",9.8,0.00514,[],{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Crimson by Redlion - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Crimson by Redlion covering 6 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Crimson vulnerabilities, Crimson security, Crimson CVE, Redlion Crimson, Crimson threat intelligence, Redlion security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":93,"@type":94,"name":95,"description":90,"url":96,"manufacturer":97,"applicationCategory":101,"softwareVersion":102,"mainEntity":103},"https:\u002F\u002Fschema.org","SoftwareApplication","Crimson","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredlion\u002Fcrimson",{"@type":98,"name":99,"url":100},"Organization","Redlion","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredlion","Security Software","6 versions tracked",{"@type":104,"name":105,"description":106,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Crimson Security Vulnerabilities","Security vulnerabilities affecting Crimson by Redlion",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":108,"apiVersion":22},"2026-10-18T22:31:41.053Z",{"rows":110,"total":11,"capped":16,"failed":11},[],[]]